git-sync-upstream
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various Git commands (
git fetch,git rebase,git stash,git push --force) to synchronize code between repositories. These commands are fundamental to the skill's primary function. - The destructive
git push --forcecommand is gated by an explicit instruction to obtain user confirmation before execution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from external Git repositories, such as commit messages and branch names, creating a potential attack surface.
- Ingestion points: Data enters the context through commands like
git log upstream/main..HEADandgit log HEAD..upstream/main. - Boundary markers: No explicit delimiter or instruction-ignoring syntax is implemented for the Git log output.
- Capability inventory: The skill has the ability to execute shell commands via Git, including rewriting history and pushing to remotes.
- Sanitization: There is no explicit sanitization or filtering of the commit messages or branch names retrieved from the upstream remote.
Audit Metadata